Skip to content
OpenAdvisories
Unscored DSA-2085-1 1 CVE

lftp - file overwrite vulnerability

Published Aug 3, 2010 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 5.0 lftp 3.7.3-1+lenny1

Vulnerabilities 1

  • Unscored —

    The get1 command, as used by lftpget, in LFTP before 4.0.6 does not properly validate a server-provided filename before…